B2evolution Cms

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML co…CVE-2020-22839B2evolution · 4.5% likely

   CWE-79

2. b2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter cfqueryparam in the User login section. This vulnerability allows attackers to exe…CVE-2021-31632B2evolution · 1.9% likely

   CWE-89

3. In b2evolution 7.2.5, if configured with admins_can_manipulate_sensitive_files, arbitrary file upload is allowed for admins, leading to command execution. NOTE: the vendor's posit…CVE-2022-44036B2evolution · CVSS 7.2 · 1.2% likely

   CWE-434

4. b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array KeyCVE-2026-76834b2evolution · CVSS 8.1 · 0.8% likely

   CWE-502

5. b2evolution CMS v7.2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the User login page. This vulnerability allows attackers to escalate privileges.CVE-2021-31631B2evolution · 0.6% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.